-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0x0.icu.anima (=0.1.0) +5589 more potentially affected by CVE-2021-3805 via object-path (>=0.0.1 <=0.11.7)

object-path NPM version =0.0.1, =1.0.1, =8.4.2, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =0.0.1, =0.0.22 - @0soft/zero-material-ui =0.0.23-alpha.3 and more Source cves: CVE-2021-3805 Source advisory: OSV:GHSA-8V63-CQQC-6R2C...

CVE-2021-3805

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

object-path 安全漏洞

object-path is an Npm library for individual developers to access variables in data structures via paths. A security vulnerability exists in object-path, which stems from the vulnerability of object paths to uncontrolled modification of object prototype attributes prototype contamination...